Configuring Security for the Administrative Domain
Managing Security for Backup Networks 6-19
You can set the key size in the obparameters file when you install Oracle Secure
Backup on the administrative server. When you install Oracle Secure Backup
interactively, the install script gives you an opportunity to modify the obparameters
file.
To set the key size in obparameters when installing interactively:
1. Before running the install script on the administrative server, or when the install
script prompts you to modify obparameters, open the file in a text editor.
2. Search for the following string: certificate key size. Set the key size to the
desired default value. The following example sets the default key size to 2048 bits:
identity certificate key size: 2048
3. Save and close the file after making any other changes to obparameters.
4. Proceed with the installation.
Oracle Secure Backup uses the key size in obparameters to set the initial value for
the certkeysize security policy. This security policy specifies the default security
key size for hosts in the domain. You can change or override this default when
configuring an individual host.
Setting the Key Size in the certkeysize Security Policy
You can change the default key size in the security policy at any time. Any hosts
configured after the change default to the changed key size.
You can set the key size in the certkeysize security policy through obtool or the
Oracle Secure Backup Web tool. Oracle Secure Backup uses the modified key size the
next time you configure a host. You can change the certkeysize value at any time,
but the change only applies to the next mkhost command.
To set the certkeysize security policy:
1. Log in to obtool as a user with the modify administrative domain's
configuration right.
2. Set the certkeysize policy to the desired default value. The following example
shows how to use obtool to set the key size to 3072 bits:
ob> cdp security
ob> setp certkeysize 3072
Setting the Key Size in mkhost
You can override the default key size for any individual host. Different hosts in the
domain can have different key sizes.
Note: There is no equivalent procedure for Windows. Windows
users are restricted to the default value.
See Also: Appendix B, "Oracle Secure Backup obparameters
Installation Parameters"
See Also: Oracle Secure Backup Administrator's Guide to learn how to
set a policy
To Next Page
Need help?
General